CVE-2026-34825

NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.30, NocoBase plugin-workflow-sql substitutes template variables directly into raw SQL strings via getParsedValue() without parameterization or escaping. Any user who triggers a workflow containing a SQL node with template variables from user-controlled data can inject arbitrary SQL. This issue has been patched in version 2.0.30.

• CWE-89

• https://github.com/nocobase/nocobase/commit/75da3dddc4aba739c398f7072725dcf7f5487f5cPatch
• https://github.com/nocobase/nocobase/releases/tag/v2.0.30Product, Release Notes
• https://github.com/nocobase/nocobase/security/advisories/GHSA-vx58-fwwq-5g8jExploit, Mitigation, Vendor Advisory
• https://github.com/nocobase/nocobase/security/advisories/GHSA-vx58-fwwq-5g8jExploit, Mitigation, Vendor Advisory

Published

Apr 2, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-3482IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.…5.3
• CVE-2026-34820Endian Firewall version 3.3.25 and prior allow stored cross-…5.4
• CVE-2026-34821Endian Firewall version 3.3.25 and prior allow stored cross-…5.4
• CVE-2026-34822Endian Firewall version 3.3.25 and prior allow stored cross-…5.4
• CVE-2026-34823Endian Firewall version 3.3.25 and prior allow stored cross-…5.4
• CVE-2026-34824Mesop is a Python-based UI framework that allows users to bu…7.5
• CVE-2026-34826Rack is a modular Ruby web server interface. Prior to versio…7.5
• CVE-2026-34827Rack is a modular Ruby web server interface. From versions 3…7.5
• CVE-2026-34828listmonk is a standalone, self-hosted, newsletter and mailin…7.1
• CVE-2026-34829Rack is a modular Ruby web server interface. Prior to versio…7.5
• CVE-2026-3483An exposed dangerous method in Ivanti DSM before version 202…7.8
• CVE-2026-34830Rack is a modular Ruby web server interface. Prior to versio…7.5